PT-2009-4140 · Xerox · Xerox Workcentre Pro+1

Published 2009-05-16 · Updated 2017-08-17 · CVE-2009-1656

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Xerox WorkCentre and WorkCentre Pro versions 232, 238, 245, 255, 265, 275 Xerox WorkCentre versions 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, 7675

Description: The issue allows remote attackers to execute arbitrary commands via unknown attack vectors, which is described as a command injection vulnerability.

Recommendations: For Xerox WorkCentre and WorkCentre Pro versions 232, 238, 245, 255, 265, 275, and WorkCentre versions 5632, 5638, 5645, 5655, 5665, 5675, 5687, 7655, 7656, 7675, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2009-1656

Affected Products

Xerox Workcentre

Xerox Workcentre Pro

References · 8

• http://vupen.com/english/advisories/2009/1328 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1656 · Security Note
• http://secunia.com/advisories/35101 · Vendor Advisory
• http://xerox.com/downloads/usa/en/c/cert_XRX09-02_v1.0.pdf · Vendor Advisory
• http://securitytracker.com/id?1022238 · Note
• http://securityfocus.com/bid/34984 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50558 · Note
• http://osvdb.org/54457 · Note